submitted by /u/subsonic68 (https://www.reddit.com/user/subsonic68)
[link] (https://www.stevencampbell.info/Pivoting-for-pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/w1dsgw/pivoting_for_pentesters/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
FFUF-ing RECON

https://cdn-images-1.medium.com/max/720/1*o29QbJycAhYssrg274Fz5w.png
, or how to get to P1–P3 from a slightly different recon

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Library Gateway | Defend the Web

https://cdn-images-1.medium.com/max/700/0*juf7MF9hVYHl-_5s.jpg
If you read a new book on web development, by the time you finished it’ll be outdated

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Gauing+Nuclei for Instant Bounties

https://cdn-images-1.medium.com/max/600/1*-Y-J5Wr8hevwoACejD1WmA.png
Back again with the instant bounties series. Last time we learned how to score instant bounties with Google dorks so check that out if you…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers hacking your crypto accounts to save your money from thieves

https://cdn-images-1.medium.com/max/960/0*-hncJym_W_Uu3LyW.jpg
As hackers attack crypto accounts and Web3 projects, heroes emerge to fight back.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Masters Programs in Cybersecurity

Masters Programs in Cybersecurity

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Полезные и эффективные алгоритмы для эллиптической кривой secp256k1

https://cdn-images-1.medium.com/max/800/0*TFwApqSDFum3Ps1K.png
В этой статье мы рассмотрим несколько полезных и эффективных алгоритмов для эллиптической кривой E над полем GF(p) , заданной коротким…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Understanding and Exploiting Graph QL

https://cdn-images-1.medium.com/max/1342/0*dAyRNkMHbEXt4RQA
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does Shodan grab RDP screenshots of Windows machines, post-Server 2003?

Hi folks,

Something I've been curious about is how Shodan manages to grab screenshots of unauthenticated Console sessions ("RDP Screenshots") on machines newer than Server 2003, and how I can do the same from my machine. On Server 2003 and older, you can use the -console flag with mstsc.exe (e.g. mstsc -v:(Hostname or IP Address) -console) to initiate this console session, and present a logon screen as if you were physically at the device, with no authentication needed.

However, this was removed in Server 2008 for obvious security reasons, and trying to use the -console flag to connect to a Server 2008 and later machine is ignored - you are prompted for authentication and if successful enter a standard RDP session.

Does anyone know how Shodan does it? Thanks in advance!

submitted by /u/BloodyGenius
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Open innovation: it sounds like a good idea, but in reality…

https://cdn-images-1.medium.com/max/1280/1*bcKtyaLEJsQk2bWSE0VbCg.jpeg
Experience has led me to be increasingly skeptical about open innovation programs in large companies: in most cases I know, the mindset is…

Continue reading on Enrique Dans »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Can I Spy On My Husband’s Phone Without Touching It (2022).

https://cdn-images-1.medium.com/max/600/0*snRR3b8TzihmBCVv.png
How Can I Spy On My Husband’s Phone Without Touching It? Are you considering hacking your husband’s cell phone due to suspicious activity…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
If you pwn a server, how would you profit from it?

We're usually invested in learning how to get into a server, but... then what?

Of course if you'd have multiple pwns you'd be able to build up a decent botnet, but what about only one? Is it possible to capitalize on it and what would be more profitable?

General question to understand which types of threat analysis should be invested to try to identify traffic types.

submitted by /u/skully_kiddo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video